Tranquil IT Forum

Hello
, I have noticed that KBs are being installed on workstations in our network even though we have not yet authorized them.

If below the file wapt-get.ini

[global]
repo_url=https://carbone.utt.fr/wapt
send_usage_report=1
use_hostpackages=1
wapt_server=https://carbone.utt.fr
use_kerberos=0
check_certificates_validity=1
verify_cert=C:\Program Files (x86)\wapt\\ssl\server\carbone.utt.fr.crt
use_repo_rules=0
max_gpo_script_wait=180
pre_shutdown_timeout=180
hiberboot_enabled=0
waptaudit_task_period=120m
[wapt-templates]
repo_url=https://store.wapt.fr/wapt
verify_cert=1
[waptwua]
default_allow=False
install_at_shutdown=true
enabled = true
allowed_severities = Critical,Important
download_scheduling = 7d

Good morning :
This installs critical KBs like the one mentioned

Hello.
So this doesn't take into account the KBs that we allow or refuse?

Hello,
yes, but only if they are not critical.

This allows for more flexibility with updates and avoids the need to worry about critical updates.

We specifically want the updates to be validated before installation across the entire network.
Do I need to remove the line

`allowed_severities = Critical,Important`

from my configuration?

Absolutely.
You can do it via a package: https://wapt.tranquil.it/store/tis-wapt-conf-policy

Hello,
sorry for the late reply.
We have updated our deployment configuration, but our clients are still installing Windows updates without our authorization.
They are even installing updates that we have refused.

Hello,
if wapt-get.ini is up to date and the service has been restarted, there shouldn't be any more problems.

What updates were installed?